NefMoto

What are these units like that are cloned “red PCB” ?

I want to read/write EDC17 Porsche Cayenne/Macan
And MED9 Audi.

Thanks in advance.

you want to work on 40.000eu car but you want to use a 100eu china scrap clone tool?

ok then.

I was asking a question..?

I have a MPPS cable that I have used reliably on ME7 and not had any fault.
I have EECLIP for reading SOIC for IMMO on ME7 am registered winols customer with genuine OLS300... I don’t mind spending money on tooling but just wanted feedback.

Mike

If you do anything professionally you should not be using cloned tools.
There is no excuse that makes it right.

So best tools for those two ECU’s I listed ?

Kess, New Genius, CMDFlash in no particular order.
I am not sure anything will flash the older K-Line Cayenne over the port though, need bootloader for that.

mpps + tpsg works as well.

Over the port?

no, not port. bsl for mpps porsche medc17.

CMD does those over the port, as do genius/kess.
You should never have to pull a MEDC17 ECU except the K-line EDC17CP04/CP14 found in the old body facelifted cayenne.

CMD w/ Tricore Boot and BMW PWD Read should be able to do everything you need, either over port or boot.

I would stay far away from Alientech products, have legit versions and barely ever use them because of reliability.

But in the future #bflashmasterrace

i was a bit disappointed that phil would not add support for porsche 17.1.6 for obd.
checking cmd, it is listed, "3.6 VR6 DFI 220KW CGRA BOSCH-MED17 TC1797 CAN".

I have dimsport tools and zero reliability issues. Never had a checksum issue for example.
CMDFlash has constantly issues with checksums, on Siemens, on MEVD17 and so on. Better always sum with OLS to be safe.
They do fix it quite quickly when you give them file examples, but it's just something I don't really want to care about.

MED17.1.6 with CMD is no problem over OBD, I've personally done it multiple times.

Old K-line EDC17, at least Phaeton + Touareg, is supported from MPPS and Kess.

Edit: But Kess only old untill TP7, and seems MPPS is only tested for EDC17CP14. But seems also for obd-unlock. MPPS release notes are sometimes a little bit short.

But for sure not i´m not talking about clone MPPS!

I don't think any tool does K-Line with TPROT.
Kess and MPPS can both write it, but you need to bootmode unlock it first. My Phaeton has a K-line EDC17CP04 and Genius and Kess both write it, but it's an older update version without TPROT, with TPROT it won't boot after write, as they don't have RSA bypass done.
I don't own MPPS though, so maybe they implemented the bypass recently.

It´s possible to create a obd-unlock container with mpps for touareg/phaeton CP04/CP14, release note was only "More types of FRF/SGO added to OBD unlock file function" but in amt-board was some more information. But you always need a sgo for it first from which it is done.

Yes, possible to create container, but are you sure there is an actual RSA bypass protocol on K-Line? TP2.0 and UDS no problem of course.
The fact that you create a SGO with TPROT patched is nothing special, if you flash that SGO with the factory tool the ECU still won't boot, because the RSA is not corrected inside (and not possible to correct, as the private keys are not leaked). So apart from creating a patched file, you still need the tool to actually have a protocol that has a way to bypass the RSA check at the end of the flash.

To clarify that, with MPPS you can create "mpps-containers" and "obdunlock-containers" from sgo/frf, also sgo/frf -> bin is available for nearly all MEDC17. Only these containers are flashable with mpps, sgo/frf direct is not possible. This can only be done from sgo/frf, not from bin-file. So if you do not have sgo/frf you cannot use obdunlock, the way with full bin-file similar kess is not possible. He did it this way for safety that nobody can use possibly faulty bin-files from somewhere. Sure a disadvantage, but for most MEDC17 is a sgo/frf available. For these CP04/CP14 are both option available standard container and obdunlock container and there is no hint in k-line container option that obdunlock is not supported. He also posted that these EDC17CP14 k-line is tested, so i assume it should work. Time intensive obdunlock is always done with standard file, after that you can write partial file (also newest MEDC17), so flashing new file to already unlocked MEDC17 needs only short time, no need to make a full flash including unlock every time. There are pro and contra for every tool for sure.

All the container stuff is totally irrelevant and useless from flashing standpoint.
Whether it is done with some fancy useless stuff or you take an unpacked bin file and patch the TPROT yourself makes no difference from a protocol perspective whatsoever.

The important part is the protocol. Either they have RSA workaround protocol for K-line or they don't. After you get the RSA workaround write in with your TPROT offed original file then of course you can write cal area.
You can write cal area on all MEDC17, nothing special here.

I think you don't understand much about how this works :)
So far I've not seen any tool have RSA bypass via KWP2000, but maybe MPPS has it. It's just about crashing the bootloader after all, probably quite similar to TP2.0

Old topic, but i want to clarify that MPPS RSA bypass is 100% working for K-Line ecu. First time will write about 20min, then you can write calibration only as usual. And no advanced checksum calculation needed anymore, so no need to "patch" in boot / bench before. Untill now i do not know any other tool which is able to do it. Btw you need a good charger, had a constant 80A current while writing with fan on full speed...

I'm assuming that is a typo.

No misstyping. 80A during whole 20min flash. There was also brand new battery inside, so all this power was needed for car and most likely running fan about 50A. My 70A charger was at the end, so i connected another 25A charger.